diff --git a/app/Http/Controllers/StatusController.php b/app/Http/Controllers/StatusController.php index 465ef381..a5e9e09d 100644 --- a/app/Http/Controllers/StatusController.php +++ b/app/Http/Controllers/StatusController.php @@ -76,7 +76,10 @@ class StatusController extends Controller public function showEmbed(Request $request, $username, int $id) { - $profile = Profile::whereNull(['domain','status'])->whereUsername($username)->first(); + $profile = Profile::whereNull(['domain','status']) + ->whereIsPrivate(false) + ->whereUsername($username) + ->first(); if(!$profile) { $content = view('status.embed-removed'); return response($content)->header('X-Frame-Options', 'ALLOWALL');